Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/616aaba8b51fedb100d6819ee9eb01d0b661c7cb.roa
File:                     616aaba8b51fedb100d6819ee9eb01d0b661c7cb.roa (raw, json)
Hash identifier:          Sxw/cbDxwAiGcAWL2jAsRj4RCwZYdWSvnL1hdK674Bs=
Subject key identifier:   54:1A:44:71:C5:49:66:E8:6D:6E:BB:FE:F7:68:D4:77:2B:57:5E:72
Certificate issuer:       /CN=ec902101fc98565e74f436a72f5cb8e35599e267
Certificate serial:       025F15
Authority key identifier: 82:BE:16:91:AF:73:AF:56:DF:E0:7C:47:FE:36:A6:D7:6D:A1:DF:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec902101fc98565e74f436a72f5cb8e35599e267.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/616aaba8b51fedb100d6819ee9eb01d0b661c7cb.roa
Signing time:             Mon 07 Aug 2023 16:11:06 +0000
ROA not before:           Sun 06 Aug 2023 16:11:05 +0000
ROA not after:            Thu 07 Aug 2025 16:11:05 +0000
asID:                     7004
IP address blocks:        200.91.24.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155413 (0x25f15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec902101fc98565e74f436a72f5cb8e35599e267
        Validity
            Not Before: Aug  6 16:11:05 2023 GMT
            Not After : Aug  7 16:11:05 2025 GMT
        Subject: CN=616aaba8b51fedb100d6819ee9eb01d0b661c7cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ee:1c:4e:0c:65:f1:ac:0d:4e:30:e6:c4:ea:
                    a7:5a:fd:6c:c1:1a:b0:34:89:5b:36:5c:08:e0:9a:
                    0d:83:38:5a:44:ce:c1:9c:67:65:cc:6d:8d:05:18:
                    7f:8a:a6:7a:61:44:eb:8d:3d:48:80:be:70:b7:0b:
                    c9:28:52:8e:cc:c0:d3:24:60:26:c5:81:60:47:5a:
                    d8:2f:bd:71:ff:43:fd:28:86:af:6a:5c:97:6d:e6:
                    7b:7f:8b:5e:36:44:e4:c4:c6:fc:c9:c3:7f:75:2f:
                    e3:21:af:e8:30:92:75:82:11:f8:1d:4b:94:91:8b:
                    50:44:10:8b:7d:e9:22:3b:5b:b7:e3:53:1b:c2:d0:
                    ac:4b:4f:3c:61:b0:09:0c:87:a3:c0:8a:0a:c7:b6:
                    35:42:f0:cc:9a:cd:25:4e:b3:ef:9a:c0:53:66:00:
                    57:04:c0:aa:d6:bc:08:8a:01:00:a5:b4:5b:9d:b3:
                    38:20:51:82:b2:54:6f:5b:d3:e3:b8:bf:9e:66:bf:
                    68:e9:7c:24:29:ea:b6:14:c0:a2:de:72:e4:df:53:
                    9d:47:3e:6b:6d:74:de:63:37:d2:56:1b:8c:e2:46:
                    a2:7b:b5:ed:b0:b5:6e:8d:5e:8c:f7:ac:24:8d:f6:
                    3c:96:b5:eb:d7:28:19:cd:20:d8:92:9c:6b:8d:3c:
                    28:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:1A:44:71:C5:49:66:E8:6D:6E:BB:FE:F7:68:D4:77:2B:57:5E:72
            X509v3 Authority Key Identifier:
                keyid:82:BE:16:91:AF:73:AF:56:DF:E0:7C:47:FE:36:A6:D7:6D:A1:DF:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec902101fc98565e74f436a72f5cb8e35599e267.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/616aaba8b51fedb100d6819ee9eb01d0b661c7cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/ec902101fc98565e74f436a72f5cb8e35599e267.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.91.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:0a:e0:c4:27:d4:a4:a5:17:28:2d:30:70:34:fe:f8:7c:3c:
         ed:84:75:1a:b9:15:71:70:65:eb:b3:92:b8:be:12:ba:0e:27:
         bb:68:41:f3:7f:67:14:63:d3:3b:72:9e:62:66:3c:3f:58:ad:
         60:84:4c:c8:72:35:02:9c:9c:d1:ea:9f:02:9c:5e:3e:a2:02:
         28:0d:6d:ee:26:0a:af:c3:65:f1:9f:a2:04:81:59:44:1e:57:
         97:58:ce:0c:68:5b:c1:31:40:d0:ec:05:f4:7e:78:5b:a3:d1:
         c5:9f:18:b2:b7:cd:a6:81:dd:25:1d:25:fd:13:98:75:5b:2d:
         92:14:26:9d:db:78:97:31:ce:98:1c:c4:a6:62:7c:ac:cb:44:
         1e:fd:ce:30:20:72:e8:8a:ff:9a:57:31:58:b9:cc:83:04:16:
         d0:43:42:d8:05:e1:09:c4:26:0f:ee:e7:ac:9b:2d:24:3c:c8:
         38:fa:87:1e:08:ba:87:d6:b4:4d:3c:f5:13:e7:92:e0:54:79:
         80:72:c1:ef:a0:6f:ef:b3:31:ad:e9:c8:d9:c1:f3:47:f2:ab:
         d4:0c:72:25:17:c0:48:73:39:14:18:68:56:90:5b:dc:2c:75:
         7c:07:5e:27:9e:dd:09:34:3c:e8:b3:07:d7:64:29:a9:ff:6c:
         29:89:c8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:41 2024 by rpki-client on console-ams.rpki-client.org